Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PrpOotZbaAWAeV6zW4_DzCogxHA.roa
File: PrpOotZbaAWAeV6zW4_DzCogxHA.roa (raw, json)
Hash identifier: 1o8zfu7ttOn2xLhCPLuC0xDOMZMp/ZcO9MvBKt2h/lc=
Subject key identifier: 3E:BA:4E:A2:D6:5B:68:05:80:79:5E:B3:5B:8F:C3:CC:2A:20:C4:70
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9367DA5BF5FAA8A286C1772B9483D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PrpOotZbaAWAeV6zW4_DzCogxHA.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 14:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:7d:a5:bf:5f:aa:8a:28:6c:17:72:b9:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eba4ea2d65b680580795eb35b8fc3cc2a20c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:04:fa:dd:53:ff:ca:12:89:c1:ac:a4:a9:
64:8c:3a:2a:6a:46:fd:42:50:c9:7f:2c:90:c8:da:
ff:c5:63:12:d1:05:23:d5:f4:25:b2:55:c9:eb:34:
3f:1c:e3:62:16:64:81:be:56:2d:84:a1:ce:d2:36:
42:7b:fe:5a:81:c8:87:30:0e:6f:49:01:55:e1:27:
e5:c0:6e:30:07:fa:0d:42:c8:7c:ef:2c:ab:7d:a2:
bd:fa:de:37:7d:ad:41:72:53:cc:7d:c6:12:7e:97:
45:d3:f0:b0:fb:5b:3a:74:85:fe:d0:02:2c:4a:69:
2a:41:3a:86:68:83:6c:86:91:24:57:ce:24:e1:e7:
45:95:39:27:6f:81:4a:b2:9f:1f:04:cd:fb:3b:28:
c8:e6:b5:9a:af:29:e6:03:e9:6f:b7:c2:10:2d:e6:
25:90:7f:15:33:d1:22:f6:ac:67:c8:75:75:e7:a6:
5b:24:c0:d1:7d:19:69:f3:ae:6e:84:3c:96:40:ca:
9d:27:0e:c5:31:3c:c0:82:22:70:24:a3:16:fb:d6:
1d:43:db:cb:16:0d:3c:d9:aa:86:fb:85:c3:e0:a6:
eb:86:8c:2a:f4:49:d0:f9:a0:3f:fe:cc:92:84:1b:
72:4b:b3:d3:ff:9a:cf:b2:d2:4d:8e:4b:ba:38:6c:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:4E:A2:D6:5B:68:05:80:79:5E:B3:5B:8F:C3:CC:2A:20:C4:70
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/PrpOotZbaAWAeV6zW4_DzCogxHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:4c:12:b4:d1:ed:7c:3b:5b:df:a3:77:ed:fb:a1:af:24:92:
cd:b5:61:9a:be:87:db:79:fe:90:d5:d8:03:77:62:00:be:e4:
a2:fa:81:39:81:8a:a5:c6:22:d7:a0:2d:b8:46:7f:e8:db:60:
2e:4d:1e:99:5a:a8:bc:30:05:f7:0e:e9:8f:06:b1:8e:da:47:
6d:69:50:f7:9c:c9:b8:46:32:71:6b:ca:ea:51:d6:b8:12:02:
59:50:4c:38:0e:a6:88:8e:2f:34:64:56:ca:d5:a0:e4:b2:4a:
13:55:32:e5:13:45:a9:57:f0:60:a6:b4:78:d7:75:48:e4:65:
64:f1:ec:0c:06:5c:a4:1f:5a:02:c6:21:ad:24:d0:7f:b1:c1:
e9:a9:0c:c2:22:bb:19:f2:3e:cf:c1:93:41:ce:d9:57:67:40:
a5:3b:b1:31:7f:c7:d0:f1:d5:9e:68:5f:ac:c7:f4:2a:72:58:
ae:88:d1:f5:c4:53:63:dc:e9:a7:dc:b7:d3:f1:23:ad:26:9b:
fa:fd:d1:b8:7d:e0:f2:b3:1c:bb:a5:55:8c:42:c9:5a:aa:3c:
ef:05:fc:0d:6b:ac:8d:4c:39:9d:ba:cb:c1:52:3a:be:9b:29:
44:a2:56:34:52:85:f3:70:b2:ad:97:cd:19:06:5a:72:dd:44:
13:9e:28:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTZ9pb9fqooobBdyuUg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJhNGVhMmQ2NWI2ODA1ODA3OTVlYjM1YjhmYzNjYzJhMjBjNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdAE+t1T/8oSicGspKlkjDoqakb9
QlDJfyyQyNr/xWMS0QUj1fQlslXJ6zQ/HONiFmSBvlYthKHO0jZCe/5agciHMA5v
SQFV4SflwG4wB/oNQsh87yyrfaK9+t43fa1BclPMfcYSfpdF0/Cw+1s6dIX+0AIs
SmkqQTqGaINshpEkV84k4edFlTknb4FKsp8fBM37OyjI5rWarynmA+lvt8IQLeYl
kH8VM9Ei9qxnyHV156ZbJMDRfRlp865uhDyWQMqdJw7FMTzAgiJwJKMW+9YdQ9vL
Fg082aqG+4XD4Kbrhowq9EnQ+aA//syShBtyS7PT/5rPstJNjku6OGyeYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD66TqLWW2gFgHles1uPw8wqIMRwMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvUHJwT290WmJhQVdBZVY2elc0X0R6Q29neEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsQMA0G
CSqGSIb3DQEBCwUAA4IBAQDjTBK00e18O1vfo3ft+6GvJJLNtWGavofbef6Q1dgD
d2IAvuSi+oE5gYqlxiLXoC24Rn/o22AuTR6ZWqi8MAX3DumPBrGO2kdtaVD3nMm4
RjJxa8rqUda4EgJZUEw4DqaIji80ZFbK1aDkskoTVTLlE0WpV/BgprR413VI5GVk
8ewMBlykH1oCxiGtJNB/scHpqQzCIrsZ8j7PwZNBztlXZ0ClO7Exf8fQ8dWeaF+s
x/QqcliuiNH1xFNj3Omn3LfT8SOtJpv6/dG4feDysxy7pVWMQslaqjzvBfwNa6yN
TDmdusvBUjq+mylEolY0UoXzcLKtl80ZBlpy3UQTnihr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org